We take data protection and information security very serious. The effective management of all personal data, including security and confidentiality, is the heart of our business and naturally underpins our practices and processes.
This privacy notice informs you about the type, scope and purpose of the processing of personal data we collect, use and process as apart of our website and its functions and content as well as our external online presences, such as our Social Media Profiles (the “Services”).
This notice applies to you, the User of our Services and us the provider of the Services and governs the processing of your personal data in context of our Services and business.
This Policy last updated on 8 May 2021.
Name and contact details of the responsible person:
Out Of TheBox Labs LTD trading as Yoonessi
Fernwood House Fernwood Road, Jesmond,
Newcastle Upon Tyne, Tyne And Wear,
NE2 1TJ, United Kingdom
Company Number 12690472
Yoonessi proceeds with all data processing procedures (e.g.collection, processing and transmission) in accordance with the statutory provisions of the UK`s Data Protection Act 2018 and in line with Regulation (EU) 2016/679 (General Data Protection Regulation). The following provides you with an overview of the type of data collected and how it is used and passed on, the security measures Yoonessi takes to protect your data and how you can exercise your rights.
What are the relevant legal bases for processing your data?
The following informs you about the legal basis of us processing your data and unless the legal basis is not specifically mentioned, the following applies:
Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.
Contract – This is where we process your information to fulfill a contractual arrangement we have made with you.
Answering your business inquiries – This is where we process your information to reply to your messages, e-mails, posts, calls, etc.
Legitimate Interests - This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way. Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm.
Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime.
Vital interests – This is where we process your information for communications about security, privacy and performance improvements of our services. Or for establishing, exercising or defending our legal rights.
Data Subject Rights
You have a number of ‘Data Subject Rights’ below is some information on what they are and how you can exercise them. There is more information on each right on the Information Commissioners (ICO) website and you can simply follow the links provided to learn more.
The right to restrict processing
Where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at anytime by contacting us.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.
We encourage you to get in touch if you have any concerns with how we collect or use your personal information. You do however also have the right to lodge a complaint directly with the ICO, their contact details can be found on their website.
Please direct all requests for information, requests for information or objections to data processing to us.
What are the categories of data subjects?
Customers,interested parties, visitors and users of the online offer as well as our business partners.
Collection, use and storage of personal data
When you use the online offer, Yoonessi collects different data from you, partly also so-called personal data. This is information that relates to an identified or identifiable natural person(hereinafter "data subject").
Visiting the Yoonessi website in general
When visiting the Yoonessi website, you transmit data to our web server (due to technical necessity) via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status(file transferred, file not found, etc.)
Web browser and operating system used
Complete IP address of the requesting computer
Amount of data transferred
For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data.The legal basis for the storage is our legitimate interest.
Further personal information is only collected if you provide it voluntarily, for example in the context of an inquiry or registration.Depending on the area concerned, Yoonessi uses the personal data provided by you to answer your inquiries, to process your order and for the purpose of technical administration of the websites. In detail, the use in the respective areas follows as follows:
Contact Forms
If you contact Yoonessi via a contact form on the Yoonessi website or social media, the data you provide will be stored so that your message can be forwarded to the correct contact person.This is done on the basis of a pre-contractual or contractual measure and to process your request. Your data provided via a contact form will not be used for any other purposes, in particular not for advertising.
Yoonessi Discovery call
We use an appointment scheduling tool to make appointments easily, quickly and without complications and to improve our service for existing and new clients. This constitutes a legitimate interest.When using the tool, you will be asked to provide personal data such as your name, email address and telephone number. You also have the opportunity to present your request and provide us with further information. If you use the tool, your details including the information you provide will be saved and, of course, transmitted over the Internet. The data entered is processed exclusively on the basis of your consent.
Data retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, the data processed by us will be deleted or restricted in their processing in accordance with the above mentioned regulations. If the data is not deleted because they are required for other and legally permissible purposes,their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
When do we disclose your Personal Data?
We may share your information with organisations that help us provide the services described in this policy and who may process such data on our behalf and in accordance with this policy, to support our online offer and our services.
Typically and unless otherwise stated in this policy, data may be shared on the basis of our contractual and pre-contractual obligations. Equally, if you have consented to it, or where there we have a legal obligation to do so or on the basis of our legitimate interests (e.g.when using agents, hosting providers, tax, business and legal advisors,customer care, accounting, billing and similar services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively).If we commission third parties to process data on the basis of a so-called "processing agreement".
In relation to meta data obtained about you, we may share a cookie identifier and IP data with analytic service providers to assist us in the improvement and optimization of our website which is subject to our Cookies Policy.
We may also disclose information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website and its users.
General technical organisational measures
Yoonessi has taken a variety of security measures to protect personal information to an appropriate extent and adequately. All information held by Yoonessi is protected by physical, technical and procedural measures that limit access to the information to specifically authorized persons in accordance with this Privacy Policy.
The Yoonessi website is behind a software firewall to prevent access from other networks connected to the Internet. In addition, only employees who need the information to perform a specific job are granted access to personally identifiable information. These employees are trained in security and privacy practices and treat your information confidentially.
Online presence in social media
We maintain online presences within social media on the basis of our legitimate interests online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
Integration Of Services And Contents Of Third Parties
We use within our online offer on the basis of our legitimate interests, content or services offered by third-party providers in order to integrate their content and services.
This always requires that the third-party providers of this content are aware of your IP address, since the content or service could not send to your browser without the IP address. The IP address is thus required for the display of this content and we endeavor to use providers that only use your IP address for the delivery of the content or services. However, Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources.
Hosting and Content Delivery Networks (CDN)
This website is hosted by an external service provider Amazon AWS. The personal data collected on this website is stored on Amazon AWS's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names,website accesses and other data generated via a website.
Amazon AWS is used for the purpose of fulfilling the contract with our potential and existing visitors and users and in the interest of a secure, fast and efficient provision of our online offer by a professional provider.
Amazon AWS will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
The Supervisory Authority
The Information Commissioner’s Office (ICO) in the UK is the for us relevant authority in matters of data protection. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however,appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us.